Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132372e302f32342d3234203d3e2037303239.roa
File:                     3230362e3230362e3132372e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          OJpHR0fO0GcY1tspGGvyJG+yRjuM3ilh+kbY+5kGzo0=
Subject key identifier:   49:DD:2B:F2:E0:81:30:5E:A0:0C:F5:96:D8:0A:FF:2A:34:97:5E:93
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       6466A6D8D221FA397635B9C829F06451D0AED4D9
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132372e302f32342d3234203d3e2037303239.roa
Signing time:             Fri 12 Aug 2022 17:07:35 +0000
ROA not before:           Fri 12 Aug 2022 17:02:35 +0000
ROA not after:            Fri 11 Aug 2023 17:07:35 +0000
asID:                     7029
IP address blocks:        206.206.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:66:a6:d8:d2:21:fa:39:76:35:b9:c8:29:f0:64:51:d0:ae:d4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Aug 12 17:02:35 2022 GMT
            Not After : Aug 11 17:07:35 2023 GMT
        Subject: CN=49DD2BF2E081305EA00CF596D80AFF2A34975E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:56:2c:32:1f:e8:3a:b4:42:ec:68:b8:8c:
                    9a:70:25:b4:e3:c7:05:90:f1:f1:c6:5b:0e:50:87:
                    87:e0:73:7b:83:b5:9f:da:70:a2:1d:f6:80:8c:76:
                    25:b9:d3:81:1b:0d:16:70:60:1a:45:b3:1d:45:d2:
                    af:e3:8e:d4:1c:49:fc:c0:4d:e8:9d:d0:60:5d:1b:
                    0d:06:88:cf:c3:6d:b3:3a:19:e4:96:ea:9e:48:f0:
                    b1:37:0a:91:1b:44:c1:92:bd:32:01:1a:ef:fe:b5:
                    0c:da:24:83:99:88:35:8d:70:07:a3:48:da:5c:76:
                    e0:87:1c:5a:5e:37:8c:c5:62:92:53:bb:d1:5b:73:
                    a3:e1:c0:f4:19:1a:f7:ea:15:49:d9:34:fa:06:d2:
                    fc:1f:37:62:46:5b:62:99:00:9a:96:96:e0:1f:ae:
                    1f:a9:36:4b:b4:0e:ef:ed:0e:d7:0c:ad:7e:17:66:
                    62:12:95:58:48:ab:6f:1d:a4:52:a6:46:2d:9d:41:
                    3d:be:d2:c3:ac:2a:de:02:eb:8a:31:32:b0:09:90:
                    cb:ce:a9:53:c7:fa:9b:3e:a7:84:4b:ce:4a:6a:3a:
                    19:53:12:54:93:1f:ab:6c:83:f9:9a:5a:a4:95:0f:
                    1a:02:58:d9:d9:ae:65:2a:af:fe:ad:5e:7f:13:6f:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DD:2B:F2:E0:81:30:5E:A0:0C:F5:96:D8:0A:FF:2A:34:97:5E:93
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132372e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:19:56:d2:ae:6b:0b:d1:87:4f:16:43:b3:50:68:53:00:6f:
         8a:b2:30:f2:ad:a9:f9:1c:77:f4:d3:66:ad:0a:2d:b4:e4:a9:
         22:76:e3:60:ac:24:43:fa:06:6d:be:54:43:fd:25:22:50:05:
         ec:82:b8:6f:95:93:f3:89:30:8a:d7:a6:12:45:09:7f:84:2d:
         ae:a3:1e:e8:f1:25:99:18:d8:4c:49:ef:a7:66:b0:03:fd:19:
         f9:b2:53:bc:8f:74:f4:9c:46:4b:76:3a:fe:c9:7c:1f:14:29:
         fa:95:60:ad:47:bc:be:f6:a6:19:ea:bb:55:13:fe:fd:dc:2e:
         ea:a6:e7:6c:c4:c0:2a:0c:56:e3:46:d3:35:0e:c8:e5:f2:01:
         bf:2f:69:80:a7:7e:f3:67:37:95:d6:c6:2d:68:d4:94:21:8c:
         13:17:89:3d:ec:48:6b:21:24:1a:b9:c0:7c:d9:48:b1:7b:f4:
         5a:8f:bc:c7:39:6d:5b:60:da:67:3c:92:83:ac:8c:c1:5c:8d:
         f5:4e:a4:c9:92:ba:d0:c0:12:3e:5b:4c:0d:eb:7a:37:2f:11:
         83:5a:39:66:56:a5:06:1d:2d:5e:16:77:34:bb:e4:4d:92:50:
         06:2a:24:2e:7a:21:e8:c7:e7:86:bf:b9:a6:74:32:0a:f7:11:
         99:4f:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----